Drop privileges when executing CLI

dist/arch/arsse.sh

@@ -1,3 +1,10 @@
 #! /usr/bin/php
 <?php
+if (posix_geteuid() == 0) {
+    $info = posix_getpwnam("arsse");
+    if ($info) { 
+        posix_setgid($info['gid']);
+        posix_setuid($info['uid']);
+    }
+}
 require "/usr/share/webapps/arsse/arsse.php";